Hello everyone!
Currently, i have a RHEL6 server, with openLDAP server running. Most of our servers run on Rhel platform, but some of them run in Solaris 10, and I need to make them authenticate with ldap too.
As the ldap server is running without encryption, the command I used for initialize the ldap client in a test zone of a Solaris 10 server is this:
HTML Code:
bash-3.00# ldapclient -v manual -a defaultServerList=ldapserver.com -a defaultSearchBase=dc=example,dc=com
And, if as
ROOT i do id $ldap_username, I get the correct uid and gid of that ldap user.
Also as root, i can do su $ldap_username and I login as that user without any problem.
However, if i try to do an ssh $ldap_user@localhost or even, su $ldap_user from a NON root user, I cant login, and I receive the following error in /var/adm/messages:
HTML Code:
Aug 14 17:31:06 test_zone su[19712]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured
Aug 14 17:38:13 test_zone sshd[19983]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured
I configured /etc/pam.conf like this:
HTML Code:
$service auth binding pam_unix_auth.so.1 server_policy
$service auth required pam_ldap.so.1
$service account binding pam_unix_account.so.1 server_policy
$service account required pam_ldap.so.1
other password required pam_authtok_store.so.1
(where $service is either login, rlogin, other, etc)
Any help will be highly appreciated!
Ps: sorry for my bad english! im not native speaker.